Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.mft
File: PaTC-98Q-CMfPfUxzlo6Ljsjzvw.mft (raw, json)
Hash identifier: 9XiEfQPvNlKr+J9PWgzVNxLzdjLMpV+pWxeXGnjuYJY=
Subject key identifier: E9:31:B3:75:0E:EB:51:49:60:E8:C8:B1:AF:92:9B:60:52:63:5C:F3
Authority key identifier: 3D:A4:C2:FB:DF:10:F8:23:1F:3D:F5:31:CE:5A:3A:2E:3B:23:CE:FC
Certificate issuer: /CN=3da4c2fbdf10f8231f3df531ce5a3a2e3b23cefc
Certificate serial: 019A4D05F803E362BC4E75E99E9B4CECDA13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.mft
Manifest number: 16A0
Signing time: Tue 04 Nov 2025 04:00:28 +0000
Manifest this update: Tue 04 Nov 2025 04:00:28 +0000
Manifest next update: Wed 05 Nov 2025 04:00:28 +0000
Files and hashes: 1: 5o7Wujr8dRj8Tg7xLsudfg7dW7M.roa (hash: qeh+5//aK6tfzfv8lL06hTEmh0G9vZwCC4vXm4+gjj4=)
2: PaTC-98Q-CMfPfUxzlo6Ljsjzvw.crl (hash: GnwnkMaDkqzdhZSnpEMHStjXL2sAhPYUKYsKgGFaF0E=)
3: f97lxnTpPAq22TugSRlYspLS210.roa (hash: JdfvaPlM9jUQgv8XgDP5xI3oBrxUeVgBrwf3Q1RSSso=)
4: n1FcMiLz_JoY9XiP99JB8OfMowM.roa (hash: RgJPkvDM2qRz5jBp/2aQedJ1Hffc/ZwhPvwJOiAl5xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:05:f8:03:e3:62:bc:4e:75:e9:9e:9b:4c:ec:da:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3da4c2fbdf10f8231f3df531ce5a3a2e3b23cefc
Validity
Not Before: Nov 4 04:00:28 2025 GMT
Not After : Nov 5 04:00:28 2025 GMT
Subject: CN=e931b3750eeb514960e8c8b1af929b6052635cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:67:91:95:74:ac:9f:97:8a:18:5e:c2:09:c1:
c0:91:41:cb:0b:6e:a3:87:18:e5:94:4f:3a:3f:8e:
a6:9a:06:a5:9f:92:bb:76:ec:8c:22:e7:32:ed:66:
5c:98:40:43:16:1f:de:fa:7a:f2:8c:26:78:25:77:
87:f7:74:47:e1:2e:8e:27:b5:7b:46:82:01:f7:c1:
c0:65:66:cb:ca:9b:c7:30:49:ce:69:cc:fb:12:e1:
f0:c5:0f:ce:7b:b5:4d:14:9e:8d:9a:9b:33:9f:30:
26:64:1f:d5:8c:8d:8e:25:2e:66:91:8e:f4:49:f5:
e7:94:2a:c1:3e:0d:12:3c:23:3d:9b:b2:77:4c:da:
0a:50:8e:5f:0b:c3:b0:e5:6e:ce:af:1c:38:63:52:
d9:05:6a:55:4a:8d:97:6e:a7:c1:17:32:bc:ae:e9:
68:92:7a:94:1c:63:1a:4c:d9:f4:7e:b2:da:b1:76:
75:72:6a:df:eb:d7:7b:6e:46:83:64:2e:4c:2d:b3:
f0:b9:44:16:ce:fd:c7:51:56:88:c9:03:9e:92:71:
24:3f:f6:17:57:f4:e0:71:0f:16:fe:9c:66:6d:52:
a5:ad:46:6a:15:c9:5c:5a:9b:f2:ad:81:8d:6f:68:
34:b7:45:3a:39:fa:19:53:96:bb:b8:88:c9:70:ca:
0e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:31:B3:75:0E:EB:51:49:60:E8:C8:B1:AF:92:9B:60:52:63:5C:F3
X509v3 Authority Key Identifier:
keyid:3D:A4:C2:FB:DF:10:F8:23:1F:3D:F5:31:CE:5A:3A:2E:3B:23:CE:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:94:17:cb:7f:72:c4:8a:ee:10:89:09:75:86:60:5b:f6:98:
b1:81:14:68:c4:bb:d5:d0:00:da:06:65:d7:19:0a:1d:e5:40:
a1:42:b1:98:ff:33:a6:46:e4:1d:7b:8b:b0:d1:eb:f4:d1:e7:
15:c6:a8:24:d1:ab:7c:2b:e9:5d:51:c7:38:31:6b:b1:f9:19:
b2:ef:7a:df:c4:4b:0a:f7:ef:8e:a5:c8:ce:15:70:86:05:c9:
32:83:d2:5b:1b:02:b8:72:5c:72:b5:4a:ad:71:b4:37:f9:97:
22:7e:2c:ff:97:6c:1d:75:6f:54:21:25:9a:94:86:e2:12:18:
1f:d4:c7:a6:30:5f:94:e9:b7:3b:b0:3e:da:90:21:43:12:77:
4f:c2:76:6f:d7:a1:fd:cd:0c:68:f0:c4:37:07:ff:da:5d:88:
a7:91:07:da:56:28:5c:d5:27:07:d6:93:27:91:af:47:b3:88:
f5:f7:84:06:55:72:af:21:7c:b3:23:d7:f2:7a:44:09:12:7b:
67:b3:86:1c:81:95:fa:dd:9e:be:73:3f:e4:c0:3a:fb:f0:1d:
95:26:57:d6:72:70:37:83:d7:b1:51:db:27:3a:ca:5b:d5:f6:
32:9b:64:30:57:13:1b:b9:b1:9e:6d:45:9d:18:30:7e:a6:67:
9b:81:3e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:49:44 2025 by rpki-client